Authentication flaw

2020-04-3017:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%

JSON

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.

CPENameOperatorVersion
ubuntu_linuxeq18.04
ubuntu_linuxeq16.04
debian_linuxeq8.0
debian_linuxeq9.0
debian_linuxeq10.0
leapeq15.1
saltge3000
saltlt3000.2
saltlt2019.2.4
application_remote_collectoreq8.0.0

Name	Operator	Version
ubuntu_linux	eq	18.04
ubuntu_linux	eq	16.04
debian_linux	eq	8.0
debian_linux	eq	9.0
debian_linux	eq	10.0
leap	eq	15.1
salt	ge	3000
salt	lt	3000.2
salt	lt	2019.2.4
application_remote_collector	eq	8.0.0